$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a87b1d83-e792-4e63-8368-ef9202b2e717/a87b1d83-e792-4e63-8368-ef9202b2e717.mft File: a87b1d83-e792-4e63-8368-ef9202b2e717.mft (raw, json) Hash identifier: zPITsSbE48fqQHmGPBgdnenqgW3yPj4OOYf2Ih6/UEc= Subject key identifier: 70:CF:01:85:47:A4:75:2A:29:6B:52:1C:A7:85:D0:5E:96:C4:E5:87 Authority key identifier: D1:F6:38:2A:6F:33:5C:D7:65:5E:0D:B9:83:CA:E1:EA:9C:E3:E0:2F Certificate issuer: /CN=a87b1d83-e792-4e63-8368-ef9202b2e717 Certificate serial: 010D0C9F4328584B92BEC4FF74104D531AC25580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a87b1d83-e792-4e63-8368-ef9202b2e717.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a87b1d83-e792-4e63-8368-ef9202b2e717/a87b1d83-e792-4e63-8368-ef9202b2e717.mft Manifest number: 010D0C9F4328584073A854157BEB85801B4E977B Signing time: Sun 19 Oct 2025 12:00:03 +0000 Manifest this update: Sun 19 Oct 2025 12:00:03 +0000 Manifest next update: Tue 21 Oct 2025 12:00:00 +0000 Files and hashes: 1: a87b1d83-e792-4e63-8368-ef9202b2e717.crl (hash: TYxi92VB7cbycwZ76ouGXV8dS6zqDowJG+CLPgqWQ7k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a87b1d83-e792-4e63-8368-ef9202b2e717/a87b1d83-e792-4e63-8368-ef9202b2e717.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a87b1d83-e792-4e63-8368-ef9202b2e717/a87b1d83-e792-4e63-8368-ef9202b2e717.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a87b1d83-e792-4e63-8368-ef9202b2e717.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:be:c4:ff:74:10:4d:53:1a:c2:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87b1d83-e792-4e63-8368-ef9202b2e717 Validity Not Before: Oct 19 12:00:03 2025 GMT Not After : Oct 21 12:00:00 2025 GMT Subject: CN=632bf3d5-d350-496b-a55b-229ac95b4665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c4:13:8e:a2:a5:af:15:34:0e:72:5f:86:af: 9a:27:b4:f5:38:ee:00:1f:ce:f3:a1:c0:9a:61:7e: 10:fc:41:15:58:db:d7:39:44:5e:c9:30:fc:a5:01: 85:97:ea:93:a9:5d:d1:0c:e5:51:cb:c3:4f:71:7f: 1d:fc:76:f1:bd:8d:0b:65:05:83:41:6e:34:9f:aa: 9a:99:a3:47:f2:3d:24:9c:27:42:7d:98:06:2a:4d: 96:6f:d1:e0:ab:95:e3:4d:0d:f9:55:b6:7e:b7:d5: ec:ba:42:f8:2a:ca:a3:01:2e:7f:85:ba:f8:f9:f0: f9:86:1c:84:38:33:9b:f8:af:dd:51:b1:92:cb:fc: 11:10:27:ba:62:dd:9b:59:18:80:f0:1d:8b:81:0f: 40:2a:e5:c8:8c:42:57:88:94:3b:27:35:f1:84:f6: ec:4d:ae:8e:2b:72:a9:8e:e6:1e:02:1e:52:f1:5b: 7e:f4:89:94:57:ae:62:f3:6b:de:ea:24:00:e4:62: f6:84:e9:50:c2:e7:f3:88:5a:1a:57:72:4b:14:d1: 1d:3c:ec:ec:c3:b5:82:be:5c:6d:c4:01:ee:f1:bf: a3:0e:4d:06:cd:80:54:77:50:79:6c:dc:ff:bd:44: 28:ae:02:89:1d:d7:d3:dd:70:cc:e4:d2:b8:96:39: 94:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CF:01:85:47:A4:75:2A:29:6B:52:1C:A7:85:D0:5E:96:C4:E5:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a87b1d83-e792-4e63-8368-ef9202b2e717/a87b1d83-e792-4e63-8368-ef9202b2e717.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a87b1d83-e792-4e63-8368-ef9202b2e717/a87b1d83-e792-4e63-8368-ef9202b2e717.crl X509v3 Authority Key Identifier: keyid:D1:F6:38:2A:6F:33:5C:D7:65:5E:0D:B9:83:CA:E1:EA:9C:E3:E0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a87b1d83-e792-4e63-8368-ef9202b2e717.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:2d:99:1c:bb:a7:7b:e1:2c:fa:07:09:c0:05:cb:07:c7:ca: 67:42:b9:7c:7f:77:63:cc:f2:c7:51:c3:cc:4c:61:78:90:47: 0a:4f:43:b7:5a:12:69:66:fa:93:6e:83:36:00:f5:fc:41:f3: 40:c8:45:72:34:23:58:15:af:6a:a1:4a:e0:0f:db:fe:67:2f: a5:37:f2:ae:d9:04:46:04:b6:b6:ff:89:42:2d:77:5c:53:22: b8:32:69:3e:02:d7:6c:b6:2c:eb:a6:c0:b8:56:ef:2c:25:70: 14:a4:a1:c7:fd:cd:db:7e:ca:0a:9b:47:a7:4f:f6:09:7c:83: 31:bc:ef:e8:04:92:31:aa:ca:9f:fb:e8:6f:ca:9d:62:40:a3: 04:ca:6d:5f:74:33:b6:52:52:e5:df:18:80:b2:4c:7a:d6:bc: f5:35:6a:1d:94:be:cb:a0:99:a6:b8:d5:2e:39:33:2c:51:2a: 3e:66:e4:e1:47:61:12:a4:f8:d2:0c:21:6d:9b:e0:44:75:89: d2:8e:06:31:c9:f0:21:6c:c1:a7:40:d2:93:f3:5b:2f:f2:f0: 47:ea:0d:b8:19:28:9b:f3:9d:ba:a4:8e:f4:02:c4:bb:6d:8b: 45:0a:3e:d1:a9:79:13:62:bc:f7:75:1a:19:b6:40:ce:23:8f: df:5c:a9:ed -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEuSvsT/dBBNUxrCVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg3YjFkODMtZTc5Mi00ZTYzLTgzNjgtZWY5MjAyYjJl NzE3MB4XDTI1MTAxOTEyMDAwM1oXDTI1MTAyMTEyMDAwMFowLzEtMCsGA1UEAxMk NjMyYmYzZDUtZDM1MC00OTZiLWE1NWItMjI5YWM5NWI0NjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcQTjqKlrxU0DnJfhq+aJ7T1OO4AH87zocCa YX4Q/EEVWNvXOUReyTD8pQGFl+qTqV3RDOVRy8NPcX8d/HbxvY0LZQWDQW40n6qa maNH8j0knCdCfZgGKk2Wb9Hgq5XjTQ35VbZ+t9XsukL4KsqjAS5/hbr4+fD5hhyE ODOb+K/dUbGSy/wRECe6Yt2bWRiA8B2LgQ9AKuXIjEJXiJQ7JzXxhPbsTa6OK3Kp juYeAh5S8Vt+9ImUV65i82ve6iQA5GL2hOlQwufziFoaV3JLFNEdPOzsw7WCvlxt xAHu8b+jDk0GzYBUd1B5bNz/vUQorgKJHdfT3XDM5NK4ljmUIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHDPAYVHpHUqKWtSHKeF0F6WxOWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hODdi MWQ4My1lNzkyLTRlNjMtODM2OC1lZjkyMDJiMmU3MTcvYTg3YjFkODMtZTc5Mi00 ZTYzLTgzNjgtZWY5MjAyYjJlNzE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTg3YjFkODMtZTc5Mi00ZTYzLTgz NjgtZWY5MjAyYjJlNzE3L2E4N2IxZDgzLWU3OTItNGU2My04MzY4LWVmOTIwMmIy ZTcxNy5jcmwwHwYDVR0jBBgwFoAU0fY4Km8zXNdlXg25g8rh6pzj4C8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hODdiMWQ4My1lNzkyLTRlNjMtODM2OC1lZjky MDJiMmU3MTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASLZkcu6d74Sz6BwnABcsH x8pnQrl8f3djzPLHUcPMTGF4kEcKT0O3WhJpZvqTboM2APX8QfNAyEVyNCNYFa9q oUrgD9v+Zy+lN/Ku2QRGBLa2/4lCLXdcUyK4Mmk+AtdstizrpsC4Vu8sJXAUpKHH /c3bfsoKm0enT/YJfIMxvO/oBJIxqsqf++hvyp1iQKMEym1fdDO2UlLl3xiAskx6 1rz1NWodlL7LoJmmuNUuOTMsUSo+ZuThR2ESpPjSDCFtm+BEdYnSjgYxyfAhbMGn QNKT81sv8vBH6g24GSib8526pI70AsS7bYtFCj7RqXkTYrz3dRoZtkDOI4/fXKnt -----END CERTIFICATE-----Generated at Mon Oct 20 11:39:23 2025 by rpki-client